Every vibrant technology marketplace needs an unbiased source of information on best practices as well as an active body advocating open standards. In the Application Security space, one of those groups is the Open Web Application Security Project (or OWASP for short).

The Open Web Application Security Project (OWASP) is a 501(c)(3) worldwide not-for-profit charitable organization focused on improving the security of software. Our mission is to make software security visible, so that individuals and organizations are able to make informed decisions. OWASP is in a unique position to provide impartial, practical information about AppSec to individuals, corporations, universities, government agencies and other organizations worldwide. Operating as a community of like-minded professionals, OWASP issues software tools and knowledge-based documentation on application security.

Everyone is free to participate in OWASP and all of our materials are available under a free and open software license. You'll find everything about OWASP here on or linked from our wiki and current information on our OWASP Blog. OWASP does not endorse or recommend commercial products or services, allowing our community to remain vendor neutral with the collective wisdom of the best minds in software security worldwide.

We ask that the community look out for inappropriate uses of the OWASP brand including use of our name, logos, project names and other trademark issues.

There are thousands of active wiki users around the globe who review the changes to the site to help ensure quality. If you're new, you may want to check out our getting started page. As a global group of volunteers with over 45,000 participants, questions or comments should be sent to one of our many mailing lists focused on topic or directed to the staff using the OWASP Contact Us Form.

Google Summer of Code

We have been accepted to the Google Summer of Code! View our Ideas list and share with the interested students you know: Google Summer of Code

#GSOC #OpenSource

Thinking of Pursuing a Cybersecurity Master's Degree?

New York University Tandon School of Engineering, in partnership with New York City Cyber Command (NYC3), launched the Cyber Fellows, a unique, affordable online cybersecurity master’s degree program designed in conjunction with elite New York City employers and OWASP to address the acute shortage of highly trained technical professionals in the city and nation.

The program offers scholarships of as much as 75 percent of tuition to U.S. residents, bringing the total tuition for the rigorous, highly technical education to $15,000 for the entire program — the lowest of any cybersecurity master’s degree program in New York City.
Deadline to apply is May 1, 2018 to start this September.

Thank you to our our corporate supporters that enable us to make software security visible, so that individuals and organizations worldwide can make informed decisions about true software security risks. A complete list of our current corporate and academic supporters can be found on our Acknowledgements Page